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1 . INTRODUCTION 



Modern DOD contracts frequently include incentive provisions for 
the reliability of the design used in building components of missiles, 
or a complete missile itself. Such an incentive provision commonly 
states that a target reliability (negotiated jointly by the government 
and the contractor) and a nominal reliability fee be paid for achieve- 
ment of the target reliability. If the contractor can demonstrate a 
higher reliability than the target value, he will receive more than the 
nominal fee; if, on the other hand, his demonstrated reliability is less 
than the target value, he receives less than the nominal fee. Thus, the 
contractor has great incentive to demonstrate as high a reliability value 
as he possibly can. 

Unfortunately, the individual items covered by such contracts 
(component parts or complete missiles) are generally very expensive, 
so a relatively small number N of items are funded for actual testing. 

In some instances, all N funded items may be tested simultaneously; 
failures that occur may then be analyzed, and the contractor may make 
design changes which are intended to remove the causes of the observed 
failures. However, if no further items are available to be tested, then 
the actual achieved reliability of the changed design cannot be estimated 
from test results, and yet the contractor would like to take advantage 
of any improvement in reliability which the change may have effected. 
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A specific model for describing this sort of situation is given by 
Corcoran, Weingarten, and Zehna [1] . They assume that N items 
are tested, each of which performs successfully (passes the test) or 
fails. Those items that fail can be classified as falling into one of K 
different failure modes. (Thus, we might think of the items as con- 
sisting of K components in logical series; the item passes if and only 
if all K components operate correctly, and will fail if any single one 
of the components does not operate correctly. Note that no two (or 
more) of these components can fail simultaneously. ) It is assumed in 
[1] that the probability a. of correcting the i ^ failure mode (by the 
design change) is known, i = 1, 2 , ..., K, for every failure mode 
that occurs in the N tests. It is pointed out in [ 1] that the achieved 
reliability (subsequent to all design changes) then is a random variable 
whose value is unknown (since the probabilities of success and of the 
occurrence of the various failure modes, for the original design, are 
not known quantities) . The paper by Corcoran, Weingarten, and Zehna 
then goes on to define a quantity called mean reliability and to discuss, 
prior to any experimental results being available, ways of estimating 
mean reliability. 

Larson [3] points out that any actual estimation of the achieved 
reliability (or more correctly, of some facet of its probability law) 
occurs only after the results of the N tests are available, and thus it 
would seem reasonable to refer only to the conditional distribution of the 
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achieved reliability, given the results of the N tests. This distribution 
is derived in [ 3] . He then speculates upon a method of calculating a 
lower bound for a confidence interval statement about the achieved re- 
liability which does not require knowledge of the probabilities of success 
or of the occurrence of the various failure modes for the initial design. 
Earnest [2] mentions this speculated method and points out that it seems 
extremely difficult to apply in practise for values of interest for the 
bounding statement. Earnest then goes on to discuss a measure of re- 
liability defined by Corcoran, Weingarten, and Zehna, and to discuss 
this quantity and its properties with an assumed prior distribution on 
the probabilities of success and the occurrence of the various failure 
mode s. 

It is the purpose of this paper to use the conditional distribution of 
achieved reliability derived in Ear son [3] and a prior distribution for 
the parameters discussed by Earnest [2] to derive the (marginal) con- 
ditional distribution of achieved reliability, independent of the proba- 
bilities of success and of the occurrence of the various failure modes. 
This distribution can then be used to make any kind of probability state- 
ment of interest regarding the achieved reliability (conditioned on the 
outcomes of the N tests) . Section 2 is devoted to a discussion of the 
assumed prior distribution and to a method of choosing the prior given 
information on the individual failure modes themselves. Section 3 then 
derives the (marginal) conditional distribution of achieved reliability, 
and section 4 presents a numerical example using synthetic data. 
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2 . 



THE PARAMETERS AND THEIR PRIOR DISTRIBUTION 



We shall adopt the notation used in both [ 1] and [ 3] . We assume 
that N items have been tested and that we observe N^ successes and 
N. failures in the i th mode, i = 1, 2, . . . , K . The initial reliability 

l 

(for the initial design) is p^ , while the probability of occurrence of 

the i^h mode is q. , i = 1 , 2 , . . . , K . Thus, N , N , . . . , N 

l OIK 

constitute a sample of a multinomial random variable with parameters 



N ’ p 0' q i q K • 

Those failure modes that occur in the N tests are identified and 
analyzed; a change is made in the initial design to attempt to remove 
some or all of these occurring failure modes. The probability that the 
i ^ failure mode is corrected is a. , a known quantity. Note that this 
model does not allow for any decrease in reliability to occur. Prior 
to the N tests the probability of the first failure mode occurring was 
, while after the N tests (assuming this mode did occur) the prob- 
ability of the first mode occurring is either still q^ or 0, depending 
on whether the corrective action was successful. In any event, there 
is no chance of the probability of occurrence of this mode having been 
increased as a result of the change in design, within the framework of 
this model. 

Let us examine the unknown parameters p , q^ , . . . , q^. a little 
more closely. As defined in [ 1 ] (and used in [2] and [ 3 ] ) , 
p 0 . » • • • * are the probabilities of a single multinomial trial 



- 4 - 



falling into one of the K + 1 classes: success, failure in i** 1 mode, 

K 

i=l,2,...,K; thus, P Q + S q. = 1 . If, as was indicated in 

i=l 

the introduction, the design concerned is for an item which consists of 

K subcomponents connected in series, so that the complete item will 

pass the test if and only if all K subcomponents operate correctly, then 

information collected on subcomponents can be used to get an indication 

of the value of p^ and the q.'s ; and this information, in turn, can be 

used to construct a reasonable prior distribution of the parameters. 

To illustrate the connection between the parameters p , q , . . . , q 

0 1 K 

of the item contracted for and the probabilities that the individual sub- 
components will work correctly, let p. be the probability that the i^h 
subcomponent works correctly, i=l,2, ...,K; and thus 1 - p^ 
is the probability that this subcomponent does not work correctly. 

Then, if the subcomponents operate independently within the item, we 
K * 

have Pq = n p^ . This does not exactly jibe with the assumption 
that no more than one failure mode can occur at a time, but does not 
represent a serious inconsistency for the uses envisaged for this model. 
The probability q^ that the first failure mode occurs should increase and 
decrease as 1 - p^ increases and decreases; it would seem con- 
sistent to define 



q 



1 



K 





K 

n 

j=i 
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and, similarly, to define 



1 - p. ^ „ 

' [ 1 - n p." J , i = 2 , 3 , . . . , K . 

K - z P * 



We then satisfy the requirement that 

p Q + E q t = 1 , 

and we have defined q.’s that vary directly with their corresponding 

(1 - p. ) ’s , as they should. Failure data on subcomponents could then 

be used to get estimates of p , q , . . . , q and to estimate parameters 

0 1 K 

of the prior distribution of p , q , . . . , q 

0 1 K 

In using a Bayesian approach to solve a problem, it is generally 
necessary to act as though the parameters of the problem are themselves 
random variables. We then have a prior distribution of the parameters 
(measuring our degree of belief as to their values) which can be used in 
a variety of ways. In the context of the problem under discussion here, 
we shall assume that the probabilities of observing a success or of ob- 
serving a failure in any one of the possible modes are random variables; 
we. shall denote the random variables by capital letters and the particular 
values which they can take on by lower case letters. Thus, is the 

probability of observing a success when one of the items is tested, and 

Q. is the probability of observing a failure in mode i , where 
K 

+ Zj Q. = 1 , as before. 

0 , i 
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An assumed prior distribution for P , Q , ...» Q should satisfy 

0 1 K 

several criteria. First, it should be such that it is capable of repre- 
senting the assumed subjective distribution of P , Q , . . . , Q . 
Second, it should be a distribution which is relatively easy to manipulate 
analytically (for the chosen problem) and not one which unnecessarily 
increases the mathematical analysis or the final computations in arriving 
at the desired solution. The parameters of the assumed prior should 
be capable of easy evaluation on the basis of previous information. In 
the context of the current problem, then, any chosen prior should be 
such that it is non-zero only over the possible ranges of P^ and the 

Q. ’ s , namely on the simplex described by P ^ 0, Q. £ 0, 
i Ox 

K 

i = 1 , 2, , K , P_ + D Q. = 1 . Also, in the context of the 

° ui * 

current problem, P , Q , . . . , Q should not be independent random 

0 1 K 

variables because of their structure. 

Silva [5] (also reported in Earnest [2] ) gives a form of the 
multivariate beta density function which would seem ideal for a prior 
distribution for P , Q , . . . , Q . Defining Q = ( Q , . . . , Q ) , 

U 1 i\ — 1 rS. 

K 

q = (q , . . . , q ) , p = 1 S q. , this distribution can be 

— 1 K 0 l 

x=l 



written 



m - 1 K m. - 1 

Vs) = g Pq _n q . 1 



for q^ S 0 , Pq s 0 , and p^ + £ q. - 1 , and 
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otherwise. The constant 



f o 'a' 



0 , 



^ _ r(m) 

G = K 

n r (m.) 

i=0 1 

K 



and m = L m. , where m. > 0 , for all i . It can be shown that 
i=0 1 1 

this prior is quite versatile, in the sense of being able to distribute the 

degrees of belief as to the values of P , Q , . . . , Q widely over 

0 1 K 

the simplex (by changing the values of the m. ! s) and, as we shall see, 
it is quite easy to use in the current context. It also includes depen- 
dence between P , Q , . . . , Q , as was mentioned would be 
0 1 K 

m. 

desirable. Silva shows that E f Q. ] = , i = 1 , 2 , . . . , K 

i m 

m 0 

(and thus E [ P^ ] = — - ) , and then suggests that prior estimates 

or values of the mean values of the Q.’s can be used to determine the 

i 

m. 

ratios . This leaves only the parameter m to be specified (in 

order to completely determine the prior) ; Silva 1 s suggestion at this 

point is to use as the value of m that number which minimizes the sum 

of squares of deviations between the prior estimates of the variances of 

Q , Q , . . . , Q and the variances imposed on these random variables 
12 K. 

by the form of the assumed prior. The value of m which achieves this 
minimization is 
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2 [E (Q.) ] 2 [1 - E (Q.) ] 2 



£ V. E (Q. ) [ 1 - E (Q. ) ] 

1 1 1 



where V. is the prior variance of Q. . 

l i 

The foregoing discussion on the assignment of values to the 

parameters m , m , . . . , m , m has been presented because it 
1 Z K 

is directly applicable to our reliability growth problem. To illustrate 
this, let us assume that the design we are considering is for an item 
which consists of K subcomponents connected in series. Let P. be 
the true unknown probability that the i^h component will work correctly, 
i = 1, 2, ..., K, as before (except now we are thinking of these as 



random variables) , and define 



K 

n p 7 

- 1 J 



Q. 

i 



— P — [ i - "<]■ 
K - L P. 

J 



K 



We assume that failure data is available for each of the K subcomponents. 
This failure data consists of r. subcomponents of the given type having 
been tested under realistic conditions, and we know the number, X. , 

l 

of these that performed satisfactorily, i = 1, 2 , ..., K. Then the 

maximum likelihood estimator of P. (thought of as being a constant) is 

X. 



P. 



l 




1=1,2 K 
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and the estimated variance of this estimator is 



V. 

1 



P ; (1 - P ; ) 



1 

it is reasonable, in general, to assume that the various samples are 
independent. We can then define 



A 

1 - p . 

6. = [ i - n p." ] , i=i, 2 ,...,K f 

K - L P. 

1 

and it seems reasonable to use this quantity as our a priori estimate 

of the mean of Q. ; thus, Q, , , . . . , will determine the ratios 

i 12 K 

m i m 2 m K - * 

, , . . . , . For realistic values of P. (say from . 9 to 1 ) , 

m m m i 

the quantity 

i - n p* 

i 

K - L P." 

i 

A 

will not differ by a great deal from 1 , and thus the variance of Q. 
should not be much different than the variance of 1 - P. ; it should, 

l 

in fact, be slightly smaller than that of 1 - P. . Thus, since the 

variance of 1 - P. is the same as the variance of P. , we will be 

i l 

conservative in using V. as the a priori variance of Q. , 
i = 1 , 2 , . . . , K . Then m is determined by Silva’s least squares 
method to be 



"2 "2 

£ [ Q. ] [ 1 - Q. ] 

m = 

£ V. Q. [ 1 - Q. ] 

ii i 
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and we then have completely specified a reasonable prior for 




The next section gives the derivation of the marginal distribution 
of true reliability Z , after corrective action, conditional on the out- 
comes of the N items tested; it also displays the computation of a 
number b such that we are 95 percent certain that Z exceeds b , 
given the outcome of the tests (or any other level of confidence desired) . 
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3. MARGINAL DISTRIBUTION OF Z 



We are given that N items are to be tested; each item is either 

a success or, if a failure, falls into one of K possible distinct modes. 

The probability of success for a given item is , and the probability 

that the item fails in mode iisQ, i=l,2,...,K. The joint 

i 

prior of P , Q , . . . , Q is the multivariate beta, f ( q) , 

described in section 2. The number of successes observed (in the 

N tests) is N^ , and the number of failures observed in mode i is 

N. , i = 1 , 2 , . . . , K (many of these N. ‘s may be zero) . Assume 

that we observe N = n . N = n , . . . , N = n with N = 0 , 

0 0 11 s s s + i 

i = l,2,...,K-s; the probability of this occurring, given values 
P = P n > Q. = q. , i = 1 , 2 , . . . , K , is 

0 0 l l 



N 



o ( ala> 



N! 



ri ! n, ! ... n ! 
0 1 s 




s 

n 

i= 1 




The posterior for Q then is 



f Q|N ( ala> 

where n 

s + 1 

derivation. ) 

Larson [ 

. . . , N > 0 
s 



r (N + m) 

K 

n r (n. + m. ) 
i=i 



n + m - 1 K n. f m. - 1 

0 0 it 

p 0 n,. 

i=l 



n = . . . = n = 0 . (See Earnest [ 2] for this 

s + 2 K 



3] shows that if we let A be the event N > 0 , N > 0 , 

1 C* 

and define Z to be the achieved reliability through the 
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design changes (a. , the probability that the i ^ failure mode 
moved, is known) , the conditional probability function of Z , 
is as follows: 



z 


P (Z = z | A) 




s 


p o 


n (1 - a ) 




i= 1 




s 


p o + q i 


a n (1 - a ) 




i=Z 




s 


P 0 + q 2 
0 


a (1 - a ) n (1 - a. ) 

1 3 1 


© 

0 


s-1 


p n + q 


a 11 ( 1 - a. ) 


0 s 


S 1 




S 


P 0 + q l + q 2 


a a n (1 - a ) 

1 3 1 


• 


s-2 


p n + q , + q 


a a 11 ( 1 - a. ) 


0 s - 1 s 

• 


s - 1 s ' X 


• 

• 

S 


• 

• 

s 


P 0 + S 


n a. 
, 1 


1 


1 



is re - 
given A , 
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The product of j jsj ( ^ I n ) and P ( Z = z | A) gives the joint distri- 
bution of the parameter Q and the achieved reliability Z, given the 
results of the N items tested. If we now integrate this over the 
ranges of the variables in q , we are left with the marginal of Z , 
given the results of the N tests. 



s 



As we have seen, Z is equal to Pg with probability n (1 - a. ) ; 

i~ 1 

then the marginal of Z , given A, is equal to the marginal posterior 



density of Pg with this probability. Z is equal to Pg + Q with 



probability a n (1 - a. ) ; then the marginal of Z is equal to the 

1 i=2 1 

marginal posterior density of Pg + with this probability. 

Proceeding in this manner through the various values of Z, we see 
that the marginal of Z consists of a weighted sum of the marginal 
posterior densities of Pg , P Q + , Pg + » - * • , 

P. + Q. + + . . . + Q , where the weights are simply the values of 

0 1 2 s 

s 

the probability function of Z, given A; thus, there are 2 terms in 
this sum. It remains merely to derive the actual form of the posterior 
density of such variables as Pg + -f . For simplicity let us 

explicitly derive the marginal posterior density of P + Q + Q ; 

U 1 u 

all of the densities of the other sums will have the same form. 

We assume then that we have tested N items and observed ng 

successes, n. failures in mode i , with i=l,2,...,s, and no 
i 

failures in modes s+1, s + 2, . . . , K . Using the prior given in 
section 2, Silva (and Earnest) shows that the posterior density of 
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is 



Wal N > = G , p, 



n o + 



m . 



- 1 



s 

n 

i= 1 



q- 



n. + m. 
1 x 



K 

n 

j=s+l 




1 



where 



T (N + m) 

G 1 = K ’ 

n r(n + m ) n r<m.) 

i=l 1 1 j=s+l J 

K 

with p a 0 , q. a 0 , for all i , and p„ + L q. = 1 . To 

0 i 0 . , x 

x=l 

derive the marginal of P , Q , and Q we need to integrate out 

v 1 

Q , . . . , Q in the above density. By a straightforward extension of 
3 K 

results given by Earnest, this is 

n 0 + m Q - 1 

f P Q , Q x , Q 2 | N (P 0 ’ q i ’ q 2 I N) = G 2 P 0 

n i + m i - ! n 2 + m 2 - 1 



N + m - (n Q + n j + n 2 ) - (m Q + + m 2 ) - 1 

' <* ' P 0 ' q l ' V 



where 



^ _ r (N + m) 

g 2 = — 

n r (n. + m.) r (N + m - n - n - n 2 - m Q - - m 2 ) 
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and p Q s 0 , q^ >. 0 , q^ £ 0 , p Q + ^ + T 2 5 1 ' Lettin g 

w = p + q + q and integrating q and q over their ranges yields, 
0 12 12 

as the marginal for W = P + Q + Q ? , 

u 1 ^ 



f W|N ,W l N| - G 3 ” 



L (n. + m. ) - 1 
0 



(1 - w) 



where 



N + m - L (n. + m . ) - 1 

o 1 1 



for 0 < w < 1 



= 0 , otherwise, 



r (N + m) 



r C £ (n. + m. ) ) r ( N + 

v 0 1 ' J ^ 



m - 



L (n. + rm ) ^ 



Thus, W = Pq + is a beta random variable with parameters 

2 2 

Li (n. + m. ) , N + m - zi (n. + m. ) . It can be seen that P plus the 

o 1 1 0 1 0 

sum of any of the Q.’s will be a beta random variable; the effect of 

l 

adding additional Q.’s to is simply to transfer the corresponding 

(n. + m. )’s from the second parameter to the first. The sum of the 

two parameters in the density function of P^ plus any of the Q.’s is a 

K 

constant and always equal to N + m (m = L m. , and N is equal 

i=0 1 

to the number of items tested) . 

To see the significance of changes in the relative values of the 
two parameters of a beta random variable, let us note some general 
results. If X is a beta random variable with parameters a and b 
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(thus, the density for X is 



„ , l \ r(a + b) a - 1 x b 

B <x:a - b) ' T(~ r ' (b ) x (1 ' x) 



0 < X < 1 



and a is the first, b the second parameter) , it is easily shown that 



the mean of X is 



a + b 

maximum value of B ( x ; a , b) ) is 



and the mode of X (corresponding to the 
a - 1 



Thus, if we consider 



a 4- b - 2 

a beta random variable for which a + b is fixed, but a is free to vary, 
the larger the first parameter gets the further to the right both the 
center of gravity (mean) and the maximum (mode) of B(x;a, b) will 
be; thus, more probability is concentrated at larger values of X . 

Thus, the density function of P + Q + Q has more weight for 

U 1 ^ 

higher values than does . 

Formally, we can explicitly write the density function for Z , 
given A , as 



f z U I A) 



1 

L 



1 

L 



1 S X. 

L n a. 1 ( 1 - a. ) 

x =0 i=l 1 1 



X. 

1 



• B ( z ; n Q + 



m. 



+ L 

j=l 



x. (n. + m. ) , 
J J J 



s 

N + n + m - m - Lx. (n. + m. ) ) 

j= i j j j 

where B (z ; a , b) is the density function of a beta random variable 



1 7 



with parameters a and b . Notice that the latter terms in this sum 
(the ones with the most x.Vs equal to one) will be the ones with most 
probability at the highest values. The mean value of Z then is easily 
shown to be 



1 

| A N + m 

X 



1 

L 



L n a. 1 (1 - a. ) 

n • i 1 1 

x = 0 i= 1 



s 

n + m + L x. (n. + m. ) j 
L 0 0 j = 1 J J J J 



Notice that the mean value of Z, given A, will increase as n. increases, 

i = 1 , 2 , . . . , s, which seems rather curious, since the number of 

times a mode occurs during the N trials does not affect the probability 

it will be corrected by the design change. 

The variance of achieved reliability, Z, given the results of the 

N tests, can be computed in particular cases rather easily; however, 

a general expression of the variance of Z in terms of the variances of 

P , Q , . . . , Q would be too cumbersome to use. It is easily shown 
0 1 K 

that if X is a beta random variable with parameters a and b , then 



E (X 2 ) 



a (a + 1) 

(a + b) (a + b + 1) 



accordingly, 
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E[Z | A] = 



1 1 S X. 1 -X. 

L ••• L n a. l (l-a. ) 1 C(x. ) 

(N+m) (N+m+1) n n , l V i' V i s' 

x =0 x = 0 l—l 

1 s 



where 



c (Xj , x 2 , 



a 

• V = [ n o + m o + L , x i <n i + m i> ] 

1 = 1 



S 

t I n + m + L x. (n. + m. ) + 1 

L ° o - =1 j j j J 



The variance of Z, given the results of the N tests, then is 

a Z|A = E C Z 2 | A 3 - [ E ( Z | A) ] , 

which is easily evaluated in any particular case. 

Interval statements about Z are easily made. Clearly, 



P (Z > b| A) = [ f z ( z |A|dz) 



1 

L 



1 s x. 



1 - X. 



•• 2 n a. (1 - a.) 

x =0 x =0 i= 1 
1 s 



1 



B (z ; C , N+m - C ) dz 



where 



C 



"o + m o + 



2 X . ( n . 

j = l J J 



m.) 

J 
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Thus, for any given b, it is a simple table lookup to evaluate the inte- 
grals involved in the sum which determine the value of the probability 
statements. If we want to fix the value of the probability statement, 
at .95 for example, we can use the fact that P ( Z > b | A) is a 
monotonically decreasing function of b to numerically zero in on the 
desired value of b (for the fixed probability) . 

The next section is devoted to a particular numerical example 
showing the determination of the prior, the marginal mean of Z , the 
marginal variance of Z , and the value b such that 

P(Z > b|A) = .95 . 
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4. A NUMERICAL EXAMPLE 



Let us suppose that we have designed an item (a missile or com- 
ponent thereof, for example) which consists of four subcomponents 
connected in series. The (unknown) probabilities that these four will 
work correctly are denoted by , P^ , P ^ , P^ , respectively. 

The probability that one of the items works correctly then is 
Pq = P P^ P^ P^ (the initial reliability) . The probability of 
observing a failure in mode i, i = 1 , 2 , 3 , 4 , is 



1 - P. 



Q. 



4 - L P. 



c> - p 0 ] 



j=i 



Assume that the following table gives prior failure information on 
each of the four subcomponents . 



Subcom- 




Number of 


Proportion 

of 


Estimated 


ponent 


Number 


Successes 


Successes 


Variance 


Number 


Te sted 


X 


x. 

P r = — 

l r . 


* ❖ * 'I' 


i 


r . 


i 

(in r. tests) 


P. (1 - P. ) 

* 1 l 

V. = 

i r 




i 


i 


l 


i 



i 


1, 000 


990 


. 99 


. 99 x 10 " 5 


2 


10, 000 


9, 800 


. 98 


. 196 x 10 " 5 


3 


5, 000 


4, 750 


.95 


. 95 x 10 " 5 


4 


200 


194 


. 97 


- 3 

. 1455 x 10 
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Then, using the method suggested in section 2 to estimate the 

parameters of the prior for P , Q , C> , Q_ , Q, , we first compute 
r 01234 

the estimated initial reliability and the estimated probabilities of 
occurrence of the four failure modes using 



4 

n 

j=i 



Q. 



1 - P. 



4 - L P. 

J 



[i - p 0 ] . 



i = 1 , 2, 3, 4 . 



The values of these quantities are displayed in the following table. 



A A A A A 

P Q Q Q Q 

0 1 2 3 4 



.8940 .0096 .0193 .0482 .0289 



We next determine the value of m, using Silva’s method, to be 



"2 "2 

£ [Q. ] [l - Q. ] 

i i 

m = - - l 

L V. [Q. ] [ 1 - Q ] 

i i i 

= 23.76 

and then compute m, , m_ , m„ , m, by m. = m Q. , i = 1 , 2 , 3 , 4 

1 2 3 4 l i 



4 

(we define = m P^ = m - L m. ) . This yields m^ = . 228 , 

i= 1 

m^ = .459, = 1.145, m^ = .687, and m^ = 21.241 . 
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These values of m and the m.'s , then, completely specify the prior 

distribution of . 

Now, let us assume that N = 15 of these items are tested and 

that we observe n^ = 13 successes and n^ = 1 failure in mode 3 

and n = 1 failure in mode 4 . The two failures are analyzed, the 
4 

design is changed, and it is decided that mode 3 has been corrected 
with probability a^ = . 9 and that mode 4 has been corrected with 
probability a^ - .99 . 

The marginal distribution of achieved reliability Z , given the 
results of the 15 tests, is 



f z | A <z I A) = 



+ 

+ 



001 B (z ; 34. 241 , 4. 519) 

099 B (z ; 35. 928 , 2. 832) 

009 B (z ; 36. 386 , 2. 374) 

891 B (z ; 38. 073 , 0. 687) 



where B(z ; a , b) again is the density function of a beta random variable 
with parameters a and b . The mean value of Z is 



1 






Z | A 38.76 



[(.001) (34.241) + (.099) (35.928) 

+ (.009) (36.386) + (.891) (38.073)] 



. 976 ; 



we also find 
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1 



Z I A 



38. 76 



[(.001) (34.241) + (.099) (35.928) 

+ (.009) (36.386) + (.891) (38.073)] 



= .976 ; 
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3 8 76 (39. 76) C (- (1206.687) + (.099) (1326.749) 

+ (.009) (1360.327) + (.891) (1487.626)] 



E [ Z 2 | A] = 



= .9 540 . 



Then, the variance of Z is 

= .9540 - (.976) 2 = .001424 
and the standard deviation of Z is 



2 

° Z | A 



o l = V. 001424 = . 038 



Let us now illustrate the computation of probability statements 
about Z . First, the probability that Z exceeds .95 is 



95 



( z|A (z l A > dz 



which in turn is equal to the weighted sum of the integrals of the four 
densities which make up f (z | a) . Using rough interpolation in 
Pearson's tables of the incomplete beta-function [4] , we find 



1 

| B (z ; 34. 241 , 4. 519) = . 069 , 

J .95 

1 

B (z; 35. 928 , 2. 832) = . 372 , 

° . 95 

1 

B (z ; 36. 386 , 2. 374) = . 453 ; 

J .95 



1 

r* 




B (z ; 



38. 073 , 



. 687) 



.918 
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thus 



P(Z > . 9 5 | A) = (.001) (.069) + (.099) (.372) 

+ (. 009) (. 453) + (. 891) (.918) 

= . 859 . 

Suppose we wanted to find the number c such that 

P(Z> c | A) = .95 ; 

since this probability is a nonincreasing function of c, we know that 
c < .95 . We then try a value of c (smaller than .95) such that 

P (Z > c'" | A) > . 95 ; 

then this new value c and c = . 95 bracket the desired value of c ; 
and by trying intermediate values, we can finally find c such that 

P (Z > c | A) = .95 

Specifically, again by rough interpolation in Pearson's tables, we find 

P (Z > .9 | A) = .9666 , 

and thus the desired value lies between . 9 and . 95 . By trying 
further values between .9 and .95 , we find that 

P (Z > . 91 | A) = .9 587 

P (Z > . 92 | A) = . 9442 , 

and thus the desired value lies between . 91 and . 92 . By further 
interpolation in this interval, we could get as close as we like to the 
value having probability .95 . 
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5. CONCLUSIONS, RECOMMENDATIONS 



A Bayesian argument has been put forth leading to a completely 
known distribution for the achieved reliability following corrective 
action. This distribution can be used to give either point or interval 
statements about the final reliability. The resulting final distribution 
is dependent upon the type of prior assumed for the parameters. It is 
felt by the author that a very reasonable prior distribution has been 
assumed for the parameters, and arguments have been given supporting 
this feeling. A possible topic for further study, should this particular 
model prove quite useful, would be to study the manner in which the 
marginal distribution for Z changes as the assumed prior is changed; 
if the final distribution for Z is relatively stable for a wide variety of 
as sumed prior s, then very strong conclusions regarding Z can be 
reached, essentially independent of the assumed prior. 

Rather than perform the sensitivity analysis just mentioned, the 
author would recommend a restructuring of the model to make it more 
realistic. There seem to be two basic weaknesses in the model assumed 
so far: the first of these is the fact that no provision is made in the 

model for the reliability possibly being decreased by the design change, 
which could definitely be the case in practical situations; the second 
defect is the assumption that all N tests are made simultaneously and 
that a single design change is made. In reality, tests of expensive pieces 
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of equipment proceed sequentially; the first time a failure mode occurs, 
an attempt is made to remove it by a design change. Then, testing 
resumes on the new type of design until a failure mode occurs again, 
etc. , at which point another design change is made. This practical 
sequential ordering of changes being made should be reflected in the 
model. 
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